CVE-2015-8254

Name of the Vulnerable Software and Affected Versions RSI Video Technologies Videofied devices using the Frontel protocol version prior to 3

Description The issue concerns the lack of integrity protection in the Frontel protocol, which can be exploited by man-in-the-middle attackers to either initiate a false alarm or deactivate an existing alarm. This is achieved by modifying the client-server data stream.

Recommendations For versions prior to 3, update the Frontel protocol to version 3 or later to ensure integrity protection is enabled, preventing man-in-the-middle attacks.